News for hackers. Stuff that matters.

A comment on Apple's “iCloud Private Relay” broke risk based authentication. Parent comment

Re:Apple's “iCloud Private Relay” broke risk based authentic... by dehrmann on Wednesday July 07, 2021 @12:37PM (#27763025)
> Personal data should be protected by TLS

I guess it's sort of a good thing that Apple is getting into the business of giving away snake oil to combat people selling it. The big iOS privacy changes that would help are DNS over HTTPS (maybe it already does this and requiring permissions for non-HTTPS network access. Maybe they could limit relay routing to non-HTTPS browser traffic?

[ Parent | on HN ]
Re:Apple's “iCloud Private Relay” broke risk based authentic... by djrogers on Wednesday July 07, 2021 @01:02PM (#27763330)
Before calling private relay ‘snake oil’ and talking about DoH, perhaps you should do a little bit of research?
[ Parent | on HN ]